CVE-2026-18949

Name of the Vulnerable Software and Affected Versions odh-dashboard (affected versions not specified)

Description A flaw exists where the Service Account (SA) is granted overly broad permissions. An attacker who compromises the dashboard's SA token can exploit these permissions to escalate privileges to the cluster-administrator level. This allows for the disruption of multi-tenant isolation and unauthorized access to sensitive data, including keys and credentials, across the entire cluster.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.